CVE-2026-77875

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description The application uses a calculator-style vault passcode to protect access, but the stored data is not bound to this authentication boundary. A local actor with access to shared external storage, such as through an authorized non-root ADB shell or another local file-reading context with appropriate storage access, can bypass the passcode by copying the SQLite database and media files directly.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.